General

  • Target

    97b3771c1cfa8c3b4f8aba4e5026ee085101ba265eb0bcb8b38ddebccf2f549e

  • Size

    1.8MB

  • MD5

    0e4a08b50ffc5d82d74ea74d7410cd4c

  • SHA1

    7f71c529800eb4064c9e85013c2c7dbd03870b5e

  • SHA256

    97b3771c1cfa8c3b4f8aba4e5026ee085101ba265eb0bcb8b38ddebccf2f549e

  • SHA512

    fad1cebf9f50a4a3cef526a72022e276f6b78e10e51bf6c5ba96e9ad1ea17cde1ecb55dffa643c016f425615ef5795e0ee7b0f976a1cb54af4d3cbf12c6e2297

  • SSDEEP

    24576:RVIl/WDGCi7/qkatXBF6727ZvhwoONE6phFrMiBsQVWGoPN9sMyE+fpEOjhxfHtt:ROdWCCi7/rahFD2P6QV8NqMyLEQ1W3xu

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 97b3771c1cfa8c3b4f8aba4e5026ee085101ba265eb0bcb8b38ddebccf2f549e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections